Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401146.roa
File: AS401146.roa (raw, json)
Hash identifier: 6duSdvi9WttRH70hMJ1EFVzKpMAchh0XGxzzG94yfbs=
Subject key identifier: 5E:53:5A:58:01:F2:91:32:13:ED:1D:AA:4B:62:05:D3:19:FE:EC:ED
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 61F24261F336457BE9AEB0AF5A55BE164464C93E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401146.roa
Signing time: Wed 04 Nov 2026 18:43:36 +0000
ROA not before: Wed 04 Nov 2026 18:38:36 +0000
ROA not after: Wed 03 Nov 2027 18:43:36 +0000
asID: 401146
IP address blocks: 85.155.227.0/24 maxlen: 24
103.68.111.0/24 maxlen: 24
103.204.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f2:42:61:f3:36:45:7b:e9:ae:b0:af:5a:55:be:16:44:64:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 4 18:38:36 2026 GMT
Not After : Nov 3 18:43:36 2027 GMT
Subject: CN=5E535A5801F2913213ED1DAA4B6205D319FEECED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:4a:6a:4f:94:d9:ff:f2:0b:24:10:8c:3d:
ff:f5:95:b5:6e:a1:25:b7:e3:c5:16:f4:d0:9c:f3:
71:5e:2b:9e:36:17:23:f0:84:5d:c9:85:60:43:d0:
d7:74:4f:0d:ef:c7:b8:46:7e:36:b8:1b:8a:83:ab:
ed:2b:23:ca:f9:9e:e1:2a:63:c5:71:d9:e3:84:fb:
94:00:e0:35:36:27:dc:2f:1c:aa:5b:cf:b7:3e:dd:
36:38:b8:6e:af:4a:b5:d1:a3:e3:40:c1:3b:85:7d:
d0:00:fc:83:21:11:bd:13:f6:34:7a:ea:bf:86:b9:
ea:cf:4f:d2:8a:2e:52:ba:aa:fe:5b:55:67:ae:d1:
9a:eb:e2:61:ce:50:98:a9:52:5d:d5:81:72:98:c9:
3d:0b:8a:74:61:60:c0:8c:37:19:5a:cb:2d:e4:ff:
37:c8:0c:43:ef:a3:de:da:9e:0b:9f:8b:0a:e4:e3:
67:9e:29:2b:75:31:63:58:40:b7:31:36:b3:cf:33:
f2:50:e6:34:57:28:4a:75:6b:ad:0a:ea:cf:38:fc:
15:4b:bd:f9:87:05:1c:8c:10:f4:1c:fa:7e:c0:3b:
43:f5:c6:5e:48:09:4d:6a:ae:2b:15:30:84:1c:0c:
b9:63:e7:81:f6:0f:1f:c1:a5:62:ca:ba:ce:e6:01:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:5A:58:01:F2:91:32:13:ED:1D:AA:4B:62:05:D3:19:FE:EC:ED
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.227.0/24
103.68.111.0/24
103.204.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a5:10:a7:53:9d:c1:f9:1b:54:ef:09:58:26:77:93:93:35:
e9:4a:fc:fe:a2:a9:bb:1e:37:c3:0b:69:0f:4d:a3:25:eb:65:
15:59:df:5e:b1:17:c0:20:39:12:7d:06:45:c8:57:64:f9:12:
01:6a:a4:61:d1:a2:b4:50:e9:44:cc:7f:cb:82:af:29:b3:82:
7a:40:52:09:68:0e:43:8b:03:f6:5a:3c:15:17:36:78:ed:f1:
12:9d:a6:80:ef:30:66:68:a6:51:d1:02:0d:12:89:52:c3:0c:
e1:6d:ab:fa:d1:7b:23:a9:e5:da:d9:17:fe:02:bc:d9:4b:e2:
9c:de:a2:b3:b0:f1:f7:a5:1d:5c:c2:b2:df:cd:49:20:5a:b0:
ba:2f:b8:e2:09:d6:b1:ab:e7:1f:98:4c:97:fa:e3:e7:17:bc:
19:2b:e4:4f:91:88:b2:2e:da:f0:20:36:0c:35:0d:11:8a:76:
5c:f0:65:2c:0b:3b:43:a5:05:ab:cb:2e:72:78:77:24:72:0b:
d3:82:fa:45:7b:47:69:85:e0:54:4e:a0:59:f1:84:d3:ab:14:
7d:33:3a:a1:4a:7e:96:eb:79:31:fc:3f:9d:a8:7a:20:14:41:
c1:f2:f7:e3:c8:d5:f9:77:45:6a:2b:52:f7:dd:99:ea:4b:e8:
55:65:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:25:38 2026 by rpki-client